Can I sleep peacefully after this?

julia

If I disable the USB connections and enable the reboot daily, if the cell phone is seized by the state, am I safe or is it better to put it in the microwave and destroy it or would a hammer also work?

trashaccount

julia if you have 90+ entropy password youre safe. Microwave is better than hammering it though but i suggest duress password for a better method of destroying data

julia

If these two options are activated I'm fine, automatic reboot and blocking of USB data transfers

area51

I have my phone auto reboot every 30 minutes and my USB is default, charge only when locked, when my phone reboots to BFU, and my phone is not in my possession any longer, nobody, no agency, LE, criminal etc is getting into my device and looking at my data... nobody, that's not to say in the future it may happen, but that's a forlorn hope of every 3 letter agency on the planet.

julia

area51 Thank you friend, but this 30 minutes doesn't bother you, for example, if an important call suddenly hangs up, I'm going to adopt your practices, but I'm going to increase it to about 2 hours. Does this harm the system, make it slow, crash or something like that?

user0

It is impossible to sleep calm if your fingerprint unlock is enabled. To unlock your phone structures only need to touch sensor with your finger

0xsigsev

julia it's 30 minutes of inactivity not every 30 'clock' minutes

area51

julia
Sorry I may have miss led you. Its 30 minutes of inactivity, if I don't unlock my phone for 30 minutes it will reboot etc

K8y

0xsigsev oh OK I was thinking the same thing as Julia. Yes that would be difficult!

How does one set up no USB/c/other port access and the reboot every night at 4am?

0xsigsev

K8y Settings -> Security & Privacy -> Exploit Protection

Thou you can't choose an hour when the phone would be rebooted, you can pick an amount of time that needs to pass after last unlock for the device to auto reboot to BFU

secrec

trashaccount Microwave is better than hammering it though

If you used a microwave, it would be quite effective at destroying itself and not your data. The flash memory in the phone is shielded.

A hammer would be FAR more effective, as long as you actually crush the flash memory chip and not just break the screen and/or battery like most idiots would manage.

trashaccount

Strong password is mathematically not crackable if the algorithm is good, but the titan m2 could be cracked one day. So use a strong password

K8y

0xsigsev and there's no harm in having it reboot every day? No battery reduction...

other8026

K8y julia No. They can't. Use a 6+ digit PIN or a passcode, combine that with an auto reboot timer, and the device will reset and put encrypted data at rest.

Use profiles and end the profiles' sessions after use if that's more convenient.

As far as I know, no company can pull data off a locked phone running an up to date version of GrapheneOS.

Edit: helpful info here: https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

K8y

So what's the reason then for the "disable/turn off" USB C port if supposedly hackers cannot just plug a cable into phone and extract its data?

GrapheneOS

K8y They can't do that even without our USB-C port control feature but rather they need to exploit vulnerabilities on the device and USB is a huge attack surface for exploiting the device. The whole point of our feature is eliminating that attack surface. The default of "Charging-only while locked" provides most of the protection. Turning off charging including USB-PD is for reducing attack surface even more by having it fully disabled while the OS is booted.

trashaccount

secrec While im not sure about the microwave destroying itself, im thankful for you pointing this out, as i didn't know:

The flash memory in the phone is shielded.

secrec

trashaccount im not sure about the microwave destroying itself

https://microwaveshub.com/does-putting-metal-in-a-microwave-damage-it/